Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/3133312e3130302e33322e302f32322d3332203d3e203631373436.roa
File:                     3133312e3130302e33322e302f32322d3332203d3e203631373436.roa (raw, json)
Hash identifier:          BXwqYL7qPh75SsO5miYP/BSabax5spzavXN8Khz+zoY=
Subject key identifier:   6F:E1:FC:89:96:E1:4A:70:2B:90:AA:86:8A:DC:CD:90:C8:C9:BE:60
Certificate issuer:       /CN=1C08F161D05B2B854FDA7F58471297A3DE6844FC
Certificate serial:       6C928EBB04627F97BC99B28751D0452806E41A1F
Authority key identifier: 1C:08:F1:61:D0:5B:2B:85:4F:DA:7F:58:47:12:97:A3:DE:68:44:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/3133312e3130302e33322e302f32322d3332203d3e203631373436.roa
Signing time:             Thu 05 Feb 2026 10:18:36 +0000
ROA not before:           Thu 05 Feb 2026 10:13:36 +0000
ROA not after:            Thu 04 Feb 2027 10:18:36 +0000
asID:                     61746
IP address blocks:        131.100.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.crl
                          rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 20:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:92:8e:bb:04:62:7f:97:bc:99:b2:87:51:d0:45:28:06:e4:1a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C08F161D05B2B854FDA7F58471297A3DE6844FC
        Validity
            Not Before: Feb  5 10:13:36 2026 GMT
            Not After : Feb  4 10:18:36 2027 GMT
        Subject: CN=6FE1FC8996E14A702B90AA868ADCCD90C8C9BE60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:79:b3:c8:9e:2f:b3:bb:86:ff:ec:4f:e6:
                    5f:30:7c:9e:6b:7e:81:68:71:87:56:e0:61:ff:17:
                    33:18:e5:3a:af:9b:14:9f:d0:89:0f:d8:fe:df:ac:
                    33:d9:3a:19:25:b7:de:87:2b:a3:5c:3c:69:83:26:
                    e2:57:31:93:12:74:db:c1:fb:90:61:3f:21:eb:12:
                    97:45:46:93:9c:b8:bb:91:b6:4f:16:17:91:da:6b:
                    72:09:b4:eb:44:3c:dc:10:e0:55:8b:34:df:5a:11:
                    f1:a9:cc:b3:fe:01:e9:a6:cd:db:47:7d:5d:4e:ec:
                    9b:be:6b:f7:d1:3f:fc:f5:f9:46:53:1c:7f:35:1e:
                    f7:2b:96:18:cf:03:7d:47:ca:00:48:2e:1e:da:81:
                    b4:4a:9e:67:7b:28:ae:39:60:d9:17:62:b3:a8:61:
                    1b:6e:01:01:14:9c:2f:46:3d:bf:f5:67:25:9a:40:
                    6f:0a:c6:ec:6b:16:a1:bc:d9:c6:44:0c:b2:f1:e6:
                    28:2c:68:24:35:aa:34:3f:30:f9:e2:00:d3:66:40:
                    5a:93:6c:09:7b:a2:fd:2b:f5:ba:dd:d2:23:1f:65:
                    b1:06:30:46:4b:45:4d:fe:59:ba:6d:f4:5c:9d:c4:
                    52:54:77:65:c0:2a:cc:33:20:bf:3e:6f:43:e3:e3:
                    a4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E1:FC:89:96:E1:4A:70:2B:90:AA:86:8A:DC:CD:90:C8:C9:BE:60
            X509v3 Authority Key Identifier:
                keyid:1C:08:F1:61:D0:5B:2B:85:4F:DA:7F:58:47:12:97:A3:DE:68:44:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C08F161D05B2B854FDA7F58471297A3DE6844FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/1/3133312e3130302e33322e302f32322d3332203d3e203631373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:f3:71:b1:72:87:dd:0b:b7:be:21:37:fe:89:50:91:59:ba:
         66:b6:f0:d4:1b:f9:82:72:9e:7f:07:88:52:16:aa:e4:6c:0f:
         38:65:a0:cf:61:9d:8f:e0:93:01:1b:10:a9:7c:50:fe:14:bf:
         91:2d:a3:02:61:d3:38:23:ae:74:71:75:df:49:60:3c:f8:7c:
         a4:80:bf:ae:23:03:e5:53:a7:f0:70:ab:fd:28:1f:f2:8c:5a:
         16:a7:c8:fa:da:7d:c1:82:a9:af:02:dd:2b:60:96:04:35:4e:
         69:4d:02:11:ed:96:57:e2:5c:73:50:50:cd:a7:2b:3f:f8:ab:
         97:94:f8:03:a1:f3:14:8c:07:f6:f0:19:05:67:cd:ab:ce:ad:
         a4:98:96:b7:d6:63:a1:cf:0e:38:81:ce:74:46:8a:bf:e4:30:
         36:07:fc:a1:db:b0:a3:7c:36:87:9b:53:f9:43:9c:cf:56:26:
         c1:0d:7d:9a:2c:47:c9:77:f9:82:f9:ce:f9:8c:ba:e5:4a:e9:
         9d:a1:15:91:4f:03:c5:e2:ba:12:6a:8f:b0:5d:f3:8b:e7:0b:
         4f:ed:ff:33:02:98:cc:02:19:8f:05:1f:82:20:a1:e7:be:45:
         ec:9a:55:a8:05:06:38:ff:73:0f:2a:b8:32:a1:a7:c8:24:24:
         0f:c9:36:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:38:07 2026 by rpki-client